From: Arto Merilainen <amerilainen@nvidia.com>
Date: Wed, 29 May 2013 10:26:05 +0000 (+0300)
Subject: gpu: host1x: Copy gathers before verification
X-Git-Tag: v3.11-rc1~65^2~62^2~3
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3364cd28906d87f0c77754998679bb66639d4112;p=pandora-kernel.git

gpu: host1x: Copy gathers before verification

The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.

This patch makes the buffer validation occur after copying the
buffers.

Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>
---

Reading git-diff-tree failed